added tests and code to ensure that a review can only be deleted by someone who created it