Update and remove functions receive only 1 doc in v0.5.8

From v0.5.8 release notes 'The corresponding update and remove callbacks passed to allow and deny now take a single document instead of an array.' so I've updated server/publish.js to accept only one doc in update and remove functions