Remove password in local user file.

refs skygragon#3

Signed-off-by: Eric Wang <skygragon@gmail.com>

Author: skygragon

lib/core.js

@@ -69,7 +69,7 @@ core.login = function(user, cb) {
 
     self.logout();
 
-    cache.set('.user', user);
+    cache.set('.user', _.omit(user, 'pass'));
     return cb(null, user);
   });
 };