add config file (with mongo connection string for now)
add basic api for authorization, not ready yet