code: public User getUser(String id) {
          return db.query("SELECT * FROM Users WHERE id = ?",
                  new ResultSetExtractor<User>() {
                      public User extractData(ResultSet rs)
                              throws SQLException {
                          if (rs.next()) {
                              return getUser(rs);
                          } else {
                              return null;
                          }
                      }
                  },
                  Integer.parseInt(id));
      }
docs: NOTE: Password is never exposed in get requests.