#962 simplify test because we already cover the get 403 for users in another test for non-staff users

GH-962 make review opinions a reusable include, get the opinion author's submission role as a method on ReviewOpinion

#962 review block: don't show _not_reviewed authors if they have left an opinion, display opinions for all types of reviews.