Old form:

db.auth(user, pass)

Also should support:

db.auth({ user: <String>, pwd: <null|String>, mechanism: <null|String>})

which allows specifying a mechanism to use, and also omitting a password for mechanisms like GSSAPI, which do not expect one.