When in -auth mode, authenticating to a db does not afford privileges to rename collection. You need to have admin access, which seems wrong. If you have auth rights to the db, and auth rights to create collections, you should be able to rename them.