don't expose all sessionData to the login-response
don't expose all sessionData to the login-response

deployd might add internals that we don't want to send over to the user

PJCzx/dpd-passport,simpleTechs/dpd-passport