remove in-band options

Before this, it was possible for users to specify options for a record load / update in-band via an `@options` key. This would potentially have allowed malicious end users to construct requests that affected the way the records were loaded and persisted - nasty. The solution is to use a separate `options` argument.