Add feature specs for user reviews

* User creates a user review
* Admin edits a user review
* Admin deletes a user review

Also, configure test environment to use Monban backdoor.
This is pretty complex - how about `expect_user_score_to_update_from(@user_review.score, new_rating)`