switch to mongoose and get authentication running.