remove hashed_password & salt from /user
copyright 2013