User passwords are stored with bcrypt hash & salt.
The authentication token is stored in the 'x-access-token' header.

For tests open mongodb port and access directly (without docker)