Remove password/salt from being returned during token auth
Implement user info api at /users/:username