Disable user_show

[TkTech]

The current version of CKAN running on the catalog appears to be outdated and is missing some performance improvements recently added in 2.6+ to improve user_show.

Since it appears every resource on the catalog is created with a single user, the old user_show behavior does some amazingly poor count queries as well as listing all packages owned by the user. This can be used to easily DoS the site (intentionally or accidentally).

Example: https://catalog.data.gov/api/action/user_show?id=47303a9e-1187-4290-85a3-1fc02dc49e4a

The main culprit is include_datasets defaulting to true on older versions of CKAN. Disabling this gives you a usable albeit slow page. Including the query improvements in 2.6 gives you a quick, usable page.