authenticate user via API
set api_key in settings
show message if not authenticated
work_id = uri
remove debug print
publish review via API