SASL: SCRAM-SERVER-FIRST-MESSAGE: client password must be a string

This occurs when the password in your database config (config/index.js) is empty.

It is easy to miss this as the error is not self explanatory. By default, the local config is used and this comes with an empty password. Populate that and you should be fine.

I know this is an old question, just putting this here for others