Added a custom serializer for User and a unit test for it. This custom serializer is highly data-protective. It hides the passwords and the permission maps.
fixed Project's serialization unit test. Also, added comma trimming to the User.toJson array function
removed a few superfluous system.out.println statements from ProjectTest
Using the transient modifier, managed to hide User.password from any serializer attempting to expose it. This means it is hidden without pre-configuring the serializer. This also means that db4o will not store the password by default thus I added a special db4o configuration in DataStore enabling storage of transient fields. I fixed the unit test for UserManager.makeEntity so that it manually inserts the password field into the user string because User.toJSON no longer includes the password field.
Merged branch dev-core-serialize into dev-core. This branch implements custom serialization for the User class, protecting the password field by making it transient (IMPORTANT: db4o still persists the transient field by adding a special configuration in DataStore.getDataStore() for the User object class.