Only add auth_field to query if editing documents.

This prevents an 'Incompatible User-Restricted Resource request'
exception to be raised when documents with unique fields are being added
to a collection (with POST or PUT).