Fix issue #217 - Hides User tab for unprivileged users

* /currentuser.js exposes the logged user
* This object has a `showUserTab` boolean that defines if the "User" tab
  needs to be displayed
* The `/rest/users` is also secured in the backend with the spring security
  layer