add auth to mongodb