This PR reshapes the User object into a JSON-compatible format, while also removing sensitive fields.