View link on site user list is not conditional on user_access('access user profiles')

The view link was showing for all users regardless of the 'access user profiles' permission. If a user that didn't have the proper permision clicked the view link, they were brought to permission denied page.

Patch fixes that and removes extraneous column headers for view & edit if viewer doesn't have appropriate permissions.