temporarily removed jsonignore on User.getPassword as used during patient creation (needs alternative)