added query annotation on UserRepository.
support mongodb authentication.