Remove password from user hash