Don't return hashed password