add User and Profile to the API

Expose only specific fields and allow filtering profiles by project id.