Return copy of players (without sessionid, email, password) in findByActiveSession