diff --git a/config/passport.js b/config/passport.js
index cd446ca..525c7fe 100644
--- a/config/passport.js
+++ b/config/passport.js
@@ -8,7 +8,7 @@ passport.serializeUser((user, done) => {
 
 passport.deserializeUser(async (id, done) => {
   try {
-    const user = await User.findById(id)
+    const user = await User.findById(id, '-password')
     done(null, user)
   } catch(err) {
     done(err)