improve mongodb with consideration of no user and password