logged-in user is can must be the recipient so message can be set as flagged