Add option.serializeFilter

...for limit user info stored in session. default "username hash salt"
Rename serializeFilter to selectFields and make the option optional