removed user's security properties from api returns