password excluded from json
settings domain class updated