Everybody can access this page, the other credentials stored are:
username: {{ user.username }}, password: {{ user.password }}, email: {{ user.email }}, permission: {{ user.userRole.title }}
angular provides the real json object
{{ users | json }}
Just open the console of your favourite browser and the ngMock will print out the requests as console.info.