return all user info expect password to client