updated the routes to work with mongodb user ids as well

An auto generated "primary key" of mongodb is a hexadecimal string, meaning the zfcuser' user id can use a-f chars as well.