Fixed #93

From v0.5.8 release notes 'The corresponding update and remove callbacks passed to allow and deny now take a single document instead of an array.' so I've updated server/publish.js to accept only one doc in update and remove functions. Fixed #93