Add authentication to review 

Useless assignment to variable - `user`.