fixing dao save that embeds copy of record in itself on every change. also changing the POST method on /record to block attempts to insert records into somebody elses collection