authentication proxy with express, passport and mongodb (in development)