Fixes missed table name when adding prefix
Ensures security information is removed from the user object before it is passed to outside controllers. Closes #11