password is not returned with user (duh).