Hide tutor phone numbers from public API

[dgramop]

Don't send the entire tutor object for responses to the public API, to prevent span to passcs email addresses, or out-of-band solicitation/recruitment