“I was logging all my users’ usernames and email addresses.

Thanks Yes, I appreciate your feedback! I’ve fixed my app so my users’ email addresses are no longer accessible via any of the API endpoints. Thanks again for taking the time to point out my app’s security flaws and suggest solutions.