Do server side checking on all mongo document operations, for more security