upgrade mongoose, froozen rest of dependencies