pass _id as string instead of ObjectId