added so that password will be encrypted on update of user model as well
removed password from any response dict and added a test for logout