Add a new user API for the notifier

This new endpoint is designed specifically to fill the needs of the
notifier and should not be used by other clients.

@jimabramson @nasthagiri 
Can you use `role.permissions.filter(name=="see_all_cohorts")` here?