findUser, instance method to strip password from JSON