Are you using a library for the user stuff in mongo/node, if you don't mind me asking? I haven't found anything that seems better than devise/cancan.
Check out https://github.com/ciaranj/connect-auth I can't vouch for the effectiveness, but it seems to be under active development.