Hide sensitive fields from the API

Exclude the `salt` and the `hashed_password` from the API
Merge pull request #935 from AlmogBaku/master

Hide sensitive fields from the API