Scope mark_as_read to the notification's recipient

Any logged-in user could mark another user's notifications as read, hiding shares and other communications before the recipient saw them.