Add a check for config.block_anon_stalking in user overview in API

[happy-river]

Fix #384 by adding a check for the Authorization header, conditional on config.site.block_anon_stalking, to the user overview API endpoint.