SECURITY: User action route was returning too much data