Changed user id to username, sent status code for every server error, and deleted password values from returned user objects.