Add option.serializeFilter

...for limit user info stored in session. default "username hash salt"