Add User.profile_visibility field
Get profile form submission "working"

Submission is not via AJAX yet; errors are returned as raw JSON, which
is not pretty.