Add option to make a profile private

[cleptric]

Currently, all user profiles are accessible without authentication. It would be great if people could mark their profile as private so only friends can access their profile page.