Fix objId and remove password on returned user