enable flagging for anonymous users; but do not show anonymous flags except to logged in users
merge lastest from master