update: _id no longer readOnly in crecord.user.json