overwrite as_json to avoid sending user password_digest