update user toJSON method