Add policies

This introduces the initial Code of Conduct (contact details still need
to be provided) and Privacy Policy. Because the latter made a reference
to reseting a password, the password reset system (done through
Flask-Security) is being turned on.

Closes #4