Security fix: Do not provide session creator name/email to users

The creator name is only visible to the creating user itself.
Merge branch 'master'
Only send Sha512 hash to creator