Fix bug #283: exclude user email from REST API