return profileLocked in config route

part of #704

src/cloudron.js

@@ -141,7 +141,8 @@ function getConfig(callback) {
             isDemo: settings.isDemo(),
             cloudronName: allSettings[settings.CLOUDRON_NAME_KEY],
             footer: allSettings[settings.FOOTER_KEY] || constants.FOOTER,
-            features: appstore.getFeatures()
+            features: appstore.getFeatures(),
+            profileLocked: allSettings[settings.DIRECTORY_CONFIG_KEY].lockUserProfiles
         });
     });
 }

src/server.js

@@ -139,7 +139,7 @@ function initializeExpressSync() {
     router.post('/api/v1/backups/create', token, authorizeAdmin, routes.backups.startBackup);
     router.post('/api/v1/backups/cleanup', token, authorizeAdmin, routes.backups.cleanup);
 
-    // config route (for dashboard)
+    // config route (for dashboard). can return some private configuration unlike status
     router.get ('/api/v1/config', token, routes.cloudron.getConfig);
 
     // working off the user behind the provided token