switch from mongo.update to .save so mongoose middleware trigger