Remove logging of hashed_password

**Is your feature request related to a problem? Please describe.**
I would like to reduce, or completely eliminate (if possible) the logging of the hashed_password field returned from the database. We sometimes log the user response within auth and user functions, which include the hashed_password field. This is only the case when the log level is set to debug, but I'd still like to reduce the logging of it.

**Describe the solution you'd like**
We should use a MongoDB projections so the database does not return the hashed_password field.

**Describe alternatives you've considered**
None.

**Additional context**
None.