Avoiding MongoDB Hash-Injection attacks