add mongoose, database schemas with pw validation