Password should not be returned with getCurrentUser call