Added REST admin controller

src/User/Model/User.php

@@ -91,6 +91,16 @@ class User extends ActiveRecord implements IdentityInterface
         return '{{%user}}';
     }
 
+    /**
+     * {@inheritdoc}
+     */
+    public function fields()
+    {
+        $fields = parent::fields();
+        unset($fields['auth_key'], $fields['password_hash']);
+        return $fields;
+    }
+
     /**
      * {@inheritdoc}
      */