lock mongodb @ 2.4.8

which is what we run in production.  fixes being unable to restore latest dumps on new laptops.