Don't send private fields back after user registration