remove passwords from userdata