ARB reviewers can't approve change requests

[Michael Nelson]

STR:
 1) Create an ARB app and publish it
 2) As the dev, make some changes
 3) Login as an ARB reviewer and view the change request

ER: you should see a form for approving the change request etc.
AR: You don't see a form at all

Note: I've just stumbled across this while working on bug 851918 - as the form wasn't being displayed for the arb reviewer, the csrf token was never set. We had a test ensuring that an arb reviewer can post the information successfully, but not whether the form was displayed to them in the first place.