omit contactPassword in data returned from db queries