mongoose, simple auth, usermodel, and more to follow