remove password from user profile