Lets users mark posts as spam and admins delete

WHOA WHOA WHOA, no `.where` in the views! Views and models can't talk to each other! Just set `@spam = @posts.where(spam: true)` in the controller.