So far I was working with Mongodb and Express. There my whole authentication was done by checking req.u