mongodb ObjectID based -- get/post only, edit/delete as a incoming modification