Allow nullable locale, default to header locale

This probably doesn't happen often, but the demo user is used by lots of people.  After the upgrade, I logged in and the site was in Portuguese.

Probably too uncommon to worry about, but my feeling was that if the user locale was null, it could default to whatever the request header sent.