add mongoid configuration for production
[feature] password update