moved sessions to mongo removed password when getting json model object ...

...and set client socket reconnection