Adding the user api controller.  Also allows the api consumer to just use the session cookie id to validate login instead of having to include a key.
Added ability to show other user's profiles.  Had to fix up the user decorator, seemed to have stale code.
Merge pull request #139 from tasermonkey/api-users

Adding the user api controller.