Ensure rare plant sightings are set to private when saving them.

This server-side validation completes the work begun with the client-
side validation on the new and edit sightings forms, for extra
protection. Also, in the Admin, it prevents an accidental change
to a non-private visibility setting for a rare plant sighting
from being saved in the database. (#489)