Use more permissive url pattern (allow @.+=) for user profile.

PR #774 addressed this for the instance-level urls which redirect to the
site-wide user profile, but missed the urls for the site-wide user profile.