added avatar_url and username to permissions acl entity
Merge branch 'CDB-2891' of github.com:CartoDB/cartodb into CDB-2891