Created based on some discussion in cognoma/core-service#25

Cognoma, as designed, does not require registration. Some users may register though. For those that do - what should the API be willing return about them? Would people be comfortable with others potentially knowing the usernames of those who have worked with the system? We have removed any e-mail being returned. We could also lock down the user endpoint to only return information about self. This prevents one from discovering other users, which could be viewed as a negative or a positive.