fix for #4, find/search is in general, (`password` has been done in `.toJSON`)