validate findBy arguments to not be about association mappings.

fix #458
but .. this is not a Document Repository problem right? Shouldn't this logic be in QueryBuilder? We would presumeably get the same problem if we use the QueryBuilder directly?