added update on users

 mongodb is pretty good.
Added JSESSION= COOKIE to help auth if you dont give a Authorization:
Token XXX