Put notificiations behind a feature flag

And only show the notifications tab at account settings when it is turned on.
The account.html has been reindented.

Fix #1762 

Why this change? The `auth.html` below is still `include_raw`.