Fix initial login to not show unset password

api/auth.js

@@ -28,9 +28,7 @@ router.post('/', parseJSON, loginValidation, async (req, res) => {
 
   await db.session.create(req, user)
 
-  const {password_hash, ...result} = user
+  res.json(user)
-
-  res.json(result)
 })
 
 // TODO: Login link stuff

pages/login.js

@@ -4,13 +4,17 @@ import Head from 'next/head'
 import Router from 'next/router'
 import isEmail from 'validator/lib/isEmail'
 
+import {useSetUser} from '~/hooks/useUser'
 import {FormController, Input, Button} from '~/components/form'
 import useAccountRedirect from '~/hooks/useAccountRedirect'
 
 export default function Login(){
   useAccountRedirect()
+  const setUser = useSetUser()
 
   const redirectAfterLogin = user => {
+    setUser(user)
+    
     if (user.is_admin)
       Router.push('/admin')
     else