This PR tracks the refactor, implementation and migration of the Profile model that's being used by the User model to store it's metadata

Personal information need to be moved into a private section that can only be read by the user it belongs to

So for this to work:

• a new PrivateProfile needs to be introduced
• The auth proxy needs to be refactor to block reading those values by everyone, except the owner (this might get harry, if multiple model connections are introduced)
• refactor the UI to fetch data from two queries
• refactor the UI to update data in two places (via two mutations)
• make the "create user" wizard email address optional