Added the user setup privilege to the APIs.

The user/read, user/search, and user_info/read APIs will now all return whether or not a user is allowed to setup other users.

Closes #568