diff --git a/core/server/api/authentication.js b/core/server/api/authentication.js
index d9dfabf07d..693d00101e 100644
--- a/core/server/api/authentication.js
+++ b/core/server/api/authentication.js
@@ -285,7 +285,7 @@ authentication = {
                 oldPassword = data.oldPassword,
                 newPassword = data.newPassword;
 
-            return settingsAPI.read(_.merge({key: 'db_hash'}, options))
+            return settingsAPI.read(_.merge({key: 'db_hash'}, _.omit(options, 'data')))
                 .then(function fetchedSettings(response) {
                     dbHash = response.settings[0].value;
 
diff --git a/core/server/api/invites.js b/core/server/api/invites.js
index 2b86ffab50..720d087ef4 100644
--- a/core/server/api/invites.js
+++ b/core/server/api/invites.js
@@ -221,7 +221,7 @@ invites = {
         }
 
         function fetchLoggedInUser(options) {
-            return models.User.findOne({id: loggedInUser}, _.merge({}, options, {include: ['roles']}))
+            return models.User.findOne({id: loggedInUser}, _.merge({}, _.omit(options, 'data'), {include: ['roles']}))
                 .then(function (user) {
                     if (!user) {
                         return Promise.reject(new common.errors.NotFoundError({message: common.i18n.t('errors.api.users.userNotFound')}));