make user profiles publicly accessible, resolves #331

actually we have this setting in `onadata/settings/common.py`