mongoose & API: some safe-guarding of PUT /user paths, send error messages if they're using the old way. remove task deletion & addition from PUT /user