use auth.user instead of userprofile
added required hidden fields
show reviews. highlight review if user is owner
added review post methods
updated review styles