how to restrict sending password in sequelize code example

Example: don't get password sequelize

var User = sequelize.define('user', attributes);

User.findAll({
    attributes: {
        exclude: ['password']
    }
});