message: Only replace password if user actually has one
  This guards against failures due to users with empty passwords (not sure how I created one, but I did and it broke this route).
diff: @@ -8,7 +8,7 @@ module.exports = function retrieveUserList () {
  const usersWithLoginStatus = utils.queryResultToJson(users)
  usersWithLoginStatus.data.forEach(user => {
  user.token = insecurity.authenticatedUsers.tokenOf(user)
  - user.password = user.password.replace(/./g, '*')
  + user.password ? user.password = user.password.replace(/./g, '*') : null
  })
  res.json(usersWithLoginStatus)
  }).catch(error => {
  