hardwired mongo DB credentials ---eek. TODO: fix this