Update README to new API
Handle MongoError on duplicate key
Include _perms in /users API response objects