moved web_profiler settings to parameters.yml

So developers can enable or disable this stuff.