Changed GetUserInfo so that the exposure of user account details is ruled by a configuration variable. It's on by default.