Shuffled Model of Federated Learning: Privacy, Accuracy, and Communication Trade-offs