Merge branch 'security-571-anonymous-user-can-enumerate-all-users-through-graphql-endpoint' into 'master'

See merge request gitlab-org/security/gitlab!2079

Changelog: security