Add raty.js and handle csrf token correctly.