We should have:
- beanie for mongo
- depends on OAUTH2-JWT where we are the server and some other party like google oversees