[fix] : hide password sending data to client

for now we are sending whole column data in the response for client in multiple places.

Refactor the backend code so that it doesn't send unncessaryd ata like passwords and others.


No files, tests, or specific entry points are named. Start by tracing the backend response construction in each place that sends whole-column data to the client, then verify that passwords and other unnecessary fields are excluded while required response data remains available.

索引モデルが issue の本文から書いたものです。