(bug) add mongoose to package.json