Fix privacy issue with password reset request

[biomancer]

Returning resource_data in render_create_success allows anyone to get all user data that is being serialized in application from resource model by using just an email, as

POST /api/v1/auth/password with {email: 'buddy.lebsack@example.net', return_url: '...'}

returns body like that:

{
  "success": true,
  "data": {
    "id": 130,
    "uid": "buddy.lebsack@example.net",
    "unconfirmed_email": null,
    "email": "buddy.lebsack@example.net",
    "first_name": "Kiana",
    "last_name": "Kiehn",
    "organization": "Vel",
    "phone": "551-432-2662",
    ...
  },
  "message": "..."
}

I think that this is a regression that was introduced in this commit

This pr removes that data from response.

[booleanbetrayal]

great catch. thanks @biomancer !