Add review to playlist

You might want to limit the length of the description field. By default, the `text` data type in Postgres allows huge strings to be stored which an attacker can take advantage of. Use the `length` validation to put a reasonable limit on the description.