Only users can use form, list spam posts for admin

https://trello.com/c/x5l9lQST/10-as-an-admin-i-can-browse-posts-marked-as-spam
You can collapse this into a single line:

``` ruby
def self.spam_listings
  Post.where("spam > ?", 0).order(spam: :desc)
end
```