update package.json with mongoose dep