Remove password from API response