refactoring: securize find_user_by_*

resources/functions/user/find_user_by_id.sql

@@ -3,7 +3,7 @@ $$
 declare
     _id alias for id;
 begin
-    select to_json(u) into resource
+    select to_jsonb(u) - 'password' into resource
     from "user" as u
     where u.id = _id;
 end;

resources/functions/user/find_user_by_username.sql

@@ -3,7 +3,7 @@ $$
 declare
     _username alias for username;
 begin
-    select to_json(u) into resource
+    select to_jsonb(u) - 'password' into resource
     from "user" as u
     where u.username = _username;
 end;