Salt password and stop them being returned in JSON