Remove password from user attributes