User privacy controls

Back end:
* Separate PrivacySettingsForm from ProfileSettingsForm
* User settings page: stay on page after save or cancel
* New endpoint to update privacy settings
* Add bootstrap modal to show privacy settings on profile page

Front end:
* Module `privacySettings.js` controls toggling and display of privacy settings
* Used in both user profile and settings pages, each with their own save and cancel buttons