Hey, as for the last question: I'd let them add dice whenever they wanted, simply because that could be super tense. But it's totally fair to limit it to only before.
As for the monsters: yes, monsters roll 2d6+ whatever their attack modifier is. Tho, honestly, using the HD as a dice pool could be really fun. There's probably a cool hack in there.