extract Post.spam method
fixed resource routing for spam
Add unflag spam button for admins
eliminate double 'update' method
Extract spam methods, use clearer methods in views