dont return createdAtIp and passhash with cookie-login
cleaned up login/getrappers