If the code gets to the `user.findOne` command, then `user`, `email` and `status` are Persona fields that must be returned no matter what.  The additional fields, `error` and `exists`, are for whether or not the user is a webmaker, so I think we need everything here.