restService: Rework results

Use DTO objects instead of the DB objects to fix security issues
like returing password hashes and other unrelated stuff when working
with db objects directly.