From v0.5.8 release notes, allow.update/remove receives only one doc instead of an array

From v0.5.8 release notes 'The corresponding update and remove callbacks passed to allow and deny now take a single document instead of an array.' so I've updated server/publish.js to accept only one doc in update and remove functions