Case 286 GDPR Preferences Edit Profile

Case 286: authenticated users should only update their own GDPR communication preferences.