//include User.findOne({user_name: user_name}, ['password']) //except User.findOne({user_name: user_name}, ['-password'])