Hide personal user fields

Fixes #277
That's not actually how the fields work.

The first argument of these queries is the query. The second argument can include more criteria. Among criteria you can include is whether or not to include fields. A field with a 0 will not be included, and a field with a 1 will. By default, all fields have a value of 1. These were also checked in postman.

http://docs.mongodb.org/manual/tutorial/project-fields-from-query-results/