Fixed issues that were preventing successful integration with OSR commenting UI
Found a couple of issues when attempting to integrate Reid's OSR commenting UI. This MR:
- does a migration to add the Finalized state into review_states table (per stakeholder discussion and use in upcoming SRP stories)
- user id saving/finalizing review didn't need to be passed as it should be picked up via request.identity
- fixed up tests to address the immediate above change
This should probably go in before Reid's OSR commenting UI MR.