add local mongodb based auth