message: Flag the find request as internal.
  This allows a hook to know that this was an internal request.  For example, this is useful for removal of passwords or other sensitive data.
diff: @@ -138,10 +138,12 @@ function getDefaultStrategy(app, settings){
  passwordField: settings.passwordField
  };
  return new LocalStrategy(strategySetup, function(username, password, done) {
  - var query = {};
  - query[settings.usernameField] = username;
  -
  - app.service(settings.userEndpoint).find({ query: query }, function(error, users) {
  + var findParams = {
  + internal: true,
  + query: {}
  + };
  + findParams.query[settings.usernameField] = username;
  + app.service(settings.userEndpoint).find(findParams, function(error, users) {
  if(error) {
  return done(error);
  }
  