devise settings, user/admin authentication
fixed specs for Product model
fixed specs for Category model
only product owner is allowed to change product; fixes in procucts_contoller_spec
ReviewDecorator - 'author' action
views/layout changes; setting new review's author and product