On the computational and statistical complexity of over-parameterized matrix sensing