fix: disable any and all jsonapi user--user resources if user has no access to profiles;