findOne now has standard err,data reply
permission fixes for function calls