Prevent User Information leak Fixes #822 (#823)

Prevents leaking the encrypted password and verification tokens to
the user when they update their account.

server/controllers/user.controller.js

@@ -292,7 +292,13 @@ export function saveUser(res, user) {
       return;
     }
 
-    res.json(user);
+    res.json({
+      email: user.email,
+      username: user.username,
+      preferences: user.preferences,
+      verified: user.verified,
+      id: user._id
+    });
   });
 }