gistfile1.js

var _ = require('lodash');

sequelize.User.findAll().done(function (err, users) {
  if (err) return res.json(403, {err: err.toString()});

  res.json(200, users.map(function (user) {
    return _.omit(user.toJSON(), ['password']);
  });
});