Exposed stickynotes data

[michaelgira23]

We expose the _id and user properties in the get stickynotes endpoint, which might be an indicator that we're directly responding with the database document-- We don't need to be responding with these properties, and we don't want to respond directly with document in case we add private data in those documents in the future.