make the query an $in so it can handle both ObjectIDs and raw data