diff --git a/ayanova/devdocs/todo.txt b/ayanova/devdocs/todo.txt
index 99857947..84aa8ca1 100644
--- a/ayanova/devdocs/todo.txt
+++ b/ayanova/devdocs/todo.txt
@@ -216,6 +216,7 @@ todo: careful and thorough PERF tests remotely and local
 todo: after attachments - integration tests update
 
 todo: EventLog Processor at server has TWO! separate skip and take portions in the same query, wtf?
+todo: User get route is returning password, login and salt in UI explorer WTF?
 
 todo: Can't hide custom fields on widget form? (no code to check if it's hidden?!)
 	- maybe because each individual field can be hidden in it so if they are all hidden then nothing shows?