users can flag posts as spam

extract this to a well named method (that should probably also do the save)