remove user password hashes out of json responses

git-svn-id: http://www.pimcore.org/svn/pimcore/private/core/trunk@5225 1f8fe7d8-47f0-464c-8d0a-336f4953ab05