removed sending _id to the client