Added access check to student_proposal review. Hosts and Developers can comment but not score an proposal (unless of course they are an org_admin/mentor). Fixed the initial scoring being set to -4, which is annoying if you just want to comment. Patch by: Lennard de Rijk Reviewed by: to-be-reviewed