title: Sequelize: don't return password
body: <p>I'm using Sequelize to do a DB find for a user record, and I want the default behavior of the model to <strong>not</strong> return the <code>password</code> field for that record.  The <code>password</code> field is a hash but I still don't want to return it.</p>
  
  <p>I have several options that will work, but none seems particularly good:</p>
  
  <ol>
  <li><p>Create a custom class method <code>findWithoutPassword</code> for the <code>User</code> model and within that method do a <code>User.find</code> with the <code>attributes</code> set as shown in the <a href="http://sequelize.readthedocs.org/en/latest/docs/models/#find-search-for-one-specific-element-in-the-database" rel="noreferrer">Sequelize docs</a></p></li>
  <li><p>Do a normal <code>User.find</code> and filter the results in the controller (not preferred)</p></li>
  <li><p>Use some other library to strip off unwanted attributes</p></li>
  </ol>
  
  <p>Is there a better way?  Best of all would be if there is a way to specify in the Sequelize model definition to never return the <code>password</code> field, but I haven't found a way to do that.</p>