Get Account Profile

Who the caller is, for either a cookie session or an API key.

/api/user/profile is cookie-only; the desktop proxies here with its API key so its feedback handler can attribute a submitted form.