RFP Create reviews

Added reviews controllers, model and views. Don't merge until episode is done.
Should they be choosing who the review belongs to? It's probably better to just assume that the review is for the current user and assign the current user as the user in the controller