2.1.3

Fixes 2 security vulnerabilities:

• Unauthenticated remote code execution via the $where operator in the collection REST API
• NoSQL injection in collection endpoint can allow indirect password access