security issue, anon and logged in users could see the fact that a user sent another user a pm (but could not see the pm itself or title)