set auth in mongodb.conf

also set path to something more logical