update doc and remove unnecessary attributes in login response