Merge branch 'security-anonymous-user-can-enumerate-all-users-through-api-v4-users-id' into 'master'

Prohibit anonymous access for specific user API endpoint

See merge request gitlab-org/security/gitlab!1717