adding authentication via Mongodb