fix(auth) - remove passsword from auth