Review recommends empowering neglected mental health patients – but changes may not go far enough