switched to mongodb and added password encryption