mongo express angular node with basic permissions for reading