You don't want to let users set the user_id once you have Devise set up. You'll want to use `current_user` context in the controller since users should only be able to post reviews from themselves.