We should have:

- beanie for mongo
- depends on OAUTH2-JWT where we are the server and some other party like google oversees