added authentication check before destroying review, refactored spec test to delete per Helen's suggestion