use mongoDB for token as default