remove password from user's rest api response