code: function toPrivateJSON() {
    const data = this.toJSON({ virtuals: true });
    data.id = data._id;
  
    delete data._id;
    delete data.__v;
  
    return data;
  }
docs: const MAX_LOGIN_ATTEMPTS = 5; const LOCK_TIME = 2 * 60 * 60 * 1000;