removes salt and hashedPassword from every query involving User model