Make a list of suspicious accounts

[mattbk]

Part of #557. This covers the logic; it’s mostly a duplicate of
dashboard/index with the buttons removed (admins can mark/unmark
suspicious on the profile itself).

Obviously needs to be put into a site template for ~users to see, and
only needs the list, not the other frame.

[mattbk]

/about/fraud/suspicious

Haven't added to a menu. The other page in /fraud isn't in a menu either, AFAICT.

[mattbk]

Almost deleted the dashboard version, but I figure that's something that could be modified in other ways.

[mattbk]

I suppose I need to add a menu item before this can be reviewed.

[mattbk]

We don't have a root page for /fraud; what would we put there? Maybe suggestions on how to let us know about potential fraud, including a link to http://inside.gratipay.com/howto/review-accounts? This is the type of thing that the community can pitch in for.

That would probably make the suspicious list a tab on the fraud page.

[mattbk]

[mattbk]

Ready for review, @whit537, @kaguillera et alii.

[chadwhitacre]

Nav layout breaking for me when bolded:

[mattbk]

Nav layout breaking for me when bolded:

Would "Fraud" be sufficient?

[chadwhitacre]

I think conceptually it could be grouped with Security and also AML (maybe under "Safety"?), but ...

The primary motivation here is to give suspicious users some way of discovering that they've been marked suspicious, correct?

The principle is that untrusted users are announced as such so that false positives have a chance to discover this and attempt to redeem themselves. We can't be like PayPal, an infuriatingly opaque black box if you're a false positive.

Is a listing of suspicious accounts the best way to do that? How will suspicious users know to look there? I realize the suspicious listing was my suggestion, but #557 (comment) seems like a better solution to the problem:

notify the user (if possible) and put a note on their profile

That way the suspicious user doesn't have to work so hard to discover the problem.

I think we should abort this PR and go for the notify/note solution. 🐭

[mattbk]

I think we should abort this PR and go for the notify/note solution.

Fine by me. I learned some things, at least.