add contributing
set dependency version for mongoose
bump