diff --git a/app.js b/app.js
index 554dc7ed33..062e077c8c 100644
--- a/app.js
+++ b/app.js
@@ -193,9 +193,7 @@ app.use(helmet.contentSecurityPolicy({
 
 app.use(function (req, res, next) {
     // Make user object available in templates.
-    fullUser = req.user ? req.user : null;
-    if (fullUser) fullUser.password = null;
-    res.locals.user = fullUser;
+    res.locals.user = req.user;
     next();
 });