mongo should be using auth
mongo should be using auth