hiding email address from user api