fix mongoDB support (sessions/logins); update TODO, requirements