remove returning password

backend/models/user.go

@@ -5,6 +5,6 @@ import "gorm.io/gorm"
 type User struct {
 	gorm.Model        // includes ID, CreatedAt, UpdatedAt, DeletedAt
 	Username   string `gorm:"uniqueIndex"`
-	Password   []byte
+	Password   []byte `json:"-"`
 	Admin      bool
 }