remove password from get user