update mongoose to most stable version
make sure privateNote and non-active organizations are only available on private API (by logged in user) + fix bug with URL social media