Remove password and salt from /user/login response