Now some Model attributes aren't returned

Previously, annoying attributes such as "_id", "password", and "token" were
returned on all queries and such. Now they are not. Huzzah security!