Limit what user data counts as 'safe'
Add Profiles.View check to user/summary endpoint
UserModel GetSummary should return corrected PhotoUrls
Merge pull request #2163 from vanilla/hotfix/summary-leak

Restricts guest access to user data & fixes photo URLs for WordPress