Allow single profile per act instead of array of profiles

If profile is misdefined and uses a single object, the permission will be ignored.
https://github.com/CoderDojo/cp-permissions-plugin/blob/master/lib/check_profiles.js#L199 should ensure that profiles, if an object, should be casted as an array, or reject