Working on #454 Hide stuff users don't have permission to use
Avatar upload box & PM compose links