Participant#to_json now returns public attributes only (ie not :pin and :phone_number)