move mongoose to devDependencies