[bug 879748] Secured the automatic /user/:userid path