removing sensitive data from user objet