mattdrayer/api-profiler-middleware: Hotshot/CProfile support

@chrisndodge -- here's the initial submission for the profiler work I've been doing -- seems like it works pretty well, but probably some tweaking required here and there.  I'll catch up w/ @dmitchell and others as well.
We can certainly change this guard clause -- what is basically says is "if the profiler is enabled using ?prof=1, but we're not in debug mode and the user isn't a superuser, then tell the user they can't use the profiler"