Additional validation for canReceive
For `FlexaCollateralManager.tokensReceived` there is validation to ensure that only the Amp calls the function. In contrast, there is no such validation for `canReceive` and it is unclear if this is the intention.\\n```\\nrequire(msg.sender == amp, "Invalid sender");\\n```\\n
Consider adding a conjunct `msg.sender == amp` in function `_canReceive`.\\n```\\nfunction \\_canReceive(address \\_to, bytes32 \\_destinationPartition) internal view returns (bool) {\\n    return \\_to == address(this) && partitions[\\_destinationPartition];\\n}\\n```\\n
```\\nrequire(msg.sender == amp, "Invalid sender");\\n```\\n