Since https://gitlab.com/gitlab-org/gitlab-ce/merge_requests/23320,
personal access tokens are no longer needed for profiling an endpoint
since users are stubbed directly.