changed db access layer to mongoose, and removed passport stuff