* Implemented 'disallowed' fields feature in PSON
- Put it to use to make sure no passwords get serialised
* Implemented serialisation of db.Expando dynamic props
* Added an example in /apidemo (select 'Current User' from the right hand select)