Don't return password after register.
Update user route spec.