Fixed security issues - no longer allow system collection edits and $where queries are blocked