fixed authorization for deleting reviews