function (result, user) {

      // Return authenticated user
      // Remove sensitive data befor sending user
      result.user = userProfile.sanitizeProfile(user);

      return res.json(result);
    }
        req.login(user, function (err) {
          if (err) {
            return res.status(400).send(err);
          }

          // Remove sensitive data before sending out
          user = userProfile.sanitizeProfile(user);
          res.json(user);
        });
      req.login(user, function (err) {
        // Remove sensitive data befor sending user
        user = userProfile.sanitizeProfile(user);

        done(err, user);
      });
      statService.stat(statsObject, function () {

        // Remove sensitive data before sending out
        user = userProfile.sanitizeProfile(user);
        res.json(user);
      });