How to exclude the password when returning a response in Sequelize code example

Example: don't get password sequelize

var User = sequelize.define('user', attributes);

User.findAll({
    attributes: {
        exclude: ['password']
    }
});