Added private atrtibutes

Attributes in PRIVATE_ATTRS (like passwords) should not be shown
anywhere, so use the diff between PRIVATE_ATTRS and USER.all_fields for
all user fields that are allowed to be shown.