minor testing with saves in mongo
add basic user auth