Do not marshal hashed password on user responses.