Need to add logic that requires that only the user who wrote the review can destroy that review.

Same logic needs to apply to the update method.