added authorization for users before writing reviews