fix: make password a write-only field

program/serializers.py

@@ -110,6 +110,9 @@ class UserSerializer(serializers.ModelSerializer):
     )
 
     class Meta:
+        extra_kwargs = {
+            "password": {"write_only": True},
+        }
         model = User
         read_only_fields = (
             "id",
@@ -124,6 +127,7 @@ class UserSerializer(serializers.ModelSerializer):
             "is_staff",
             "is_superuser",
             "last_name",
+            "password",
             "profile",
             "username",
         ) + read_only_fields