Expose user locals properly and keep account data

Whitelist exposed user data so it is both easier to see what is
available as well as to prevent sensitive data from being exposed to the
view.

Certain account data is now persisted to database so that it can be
properly exposed elsewhere (polls not created by current user).