Strip username from clean user

Username should not be returned since it contains
the user's primary email address.  That's bad,
since it would let non loggedin users to scrape
email addresses of our users.
Use common task query function

When searching tasks, the results were throwing an
error on render because they were using a different formula
to create the task result object (#157).

Seperate out the task.find() function from the controller
to the utility service.  Then use the utility service with
both the search and task.find endpoints.  The result is
common object structure for both types of queries.
Update utils.getUser to pass checks

Merge branch 'sprint11' into sprint11-feature-comments

Conflicts:
	api/services/utils/user.js