sandbox plugins can return error via ctx.err, and execution is stopped and error returned.
Adeed test for ctx.err creation inside a plugin.
Added is_protected constraint to password field for set operation on users collection.
set operation accepts an array in fname parameter to set with the value parameter all those fields at once.