adding support for authorization, mongoose and users

getting ready for boostrap and using passport for oath