make user profiles publicly accessible, resolves #331

yes, but I will change it to `settings.ANONYMOUS_USER_ID`