Use API Keys for MongoDB credentials and Mapbox tile calls

[gaskij]

Currently, access to the database is granted through username and password validation, which is less secure and more manual work for the project lead. In addition, the Mapbox API key is currently present in the code on the repository, which it should not be.

Access to the database should be done using API keys instead, and the Mapbox API key should be hidden from the repo.