toJSON option added to UserSchema to return result without sensitive data