remove password fields from db