fix(password): remove password from user