modified user show to not show hashes for security