Remove sensitive User password/salt/hashed_password from responses to browser.

Added method getSafeUser on the User model to sanitize sensitive information (hashed_password, salt, _id) from being sent in server responses and into the browser.