restrict user role == user actions;
add it should not have access to crud user
add moderator spec;
add make_flaggable; rails g make_flaggable;
can now flag visible_to;
adding message visibility control;