This resource request adds a `user_id` query param. But the
corresponding view function doesn't pay any attention to such a
parameter, simply inspecting the authenticated userid to work out whose
profile to provide:

  https://github.com/hypothesis/h/blob/15c39c8b58a8800d7a985c1d29b83fbdb6873266/h/accounts/views.py#L254