Merge pull request #1657 from CVEProject/dr_legacy_org_get_bug

Remove secret from response.

Author: david-rocca

src/controller/org.controller/org.controller.js

@@ -175,13 +175,13 @@ async function getUser (req, res, next) {
       return res.status(404).json(error.userDne(username))
     }
 
-    const rawResult = result
+    const rawResult = result.toObject()
 
     delete rawResult._id
     delete rawResult.__v
     delete rawResult.secret
 
-    logger.info({ uuid: req.ctx.uuid, message: username + ' was sent to the user.', user: result })
+    logger.info({ uuid: req.ctx.uuid, message: username + ' was sent to the user.', user: rawResult })
     return res.status(200).json(rawResult)
   } catch (err) {
     next(err)