enable flagging for anonymous users; but do not show anonymous flags except to logged in users