Privacy stuff (not full but just to enable /contact for now)

So, this should be mostly working, but we still need to set the visibility for replies to match the visibility of parent comments for now
This code should probably just go in Handler/Project.hs and View/Project.hs