Use mongodb for auth rate limiting