change most res.sends to res.json where applicable

[nickells]

otherwise the _id is converted into a string where we don't want that

[nickells]

actually, i'm not sure if this is necessary anymore. it doesnt seem to make a difference.