changed findUser to only return specified fields instead of whole object