BUG Hide spam comments

This pull request hides comments marked as spam from users lacking the relevant permissions.

I've also fixed the code to correctly check for the relevant permission before showing unmoderated and spam comments, rather than just checking that they are logged in.

Finally, there was a redundant $controller = Controller::curr(); sitting there begging to be deleted.