prod DB
dev DB
added pending guestlist api
removed exposing password/salt in user api