adding submission controller tests to make sure it doesn't fetch a review when a user isn't logged in