when a user is created , the json returned does not return the hash