diff --git a/src/server/api.coffee b/src/server/api.coffee
index d5ea019f8e..08ec4cb11c 100644
--- a/src/server/api.coffee
+++ b/src/server/api.coffee
@@ -54,6 +54,8 @@ router.get '/user', auth, (req, res) ->
   user.stats.maxHealth = 50
 
   delete user.apiToken
+  delete user.auth.hashed_password
+  delete user.auth.salt
 
   res.json user