remove api key and authentication data from user entity on all get calls