slight privacy inconsistency: /api/patches (HTML) lists people to anonymous users but /api/people doesn't #663

The django filtering form's data needed to filter patches by submitter are all supplied in the /api/patches django-REST-framework-HTML document, including submitter names/emails/id-#s, to anonymous not-logged-in users. These are used in the "filter" dialog box. However, /api/person, which would expose the same info, requires authentication. Please consider fixing this inconsistency. Remote anonymous REST API users cannot currently get a list of submitters to search patches of; that would be nice.