update blacklist with all system fields

packages/plugins/users-permissions/server/controllers/auth.js

@@ -280,6 +280,11 @@ module.exports = {
         'confirmationToken',
         'resetPasswordToken',
         'provider',
+        'id',
+        'createdAt',
+        'updatedAt',
+        'createdBy',
+        'updatedBy',
       ]),
       provider: 'local',
     };