Mechanism Design and Differential Privacy