add 'pods_json_api_disable_sensitive_user_data' filter to prevent return of hashed password and user email unless explicit ally allowed on user endpoint