updated

controllers/userController.js

@@ -47,7 +47,9 @@ exports.login = function(req, res) {
     // find the user
     userModel.findOne({
         username: req.body.username
-    }, function(err, user) {
+    })
+    .select('+password')
+    .exec(function(err, user) {
 
         if (err) throw err;
 

models/userModel.js

@@ -6,8 +6,8 @@ var mongooseUniqueValidator = require('mongoose-unique-validator');
 
 var userSchema = new Schema({
     username: { type: String, required: true, unique: true },
-    password: { type: String, required: true, selected: false },
-    token: { type: String, selected: false },
+    password: { type: String, required: true, select: false },
+    token: { type: String, select: false },
     description:   { type: String, default: "Hello world" },
     avatar:   { type: String, default: "img/avatars/racoon.png" },
     faircoin:   { type: String, default: "img/faircoinpublickey_sample.png" },