Added JsonIgnore-Annotation to UserAccount on Facility and Password on UserAccount (information should not be sent from server to client)