User permission password showing on response data

Look at the screenshot a salt and hash are both being used.