add rest only if logged in, tests updated
Add test to make sure only authors can edit their reviews