do not show pw hash in profile