Fixed issues with anonymous access.

Added permission logic to the event receiver and removed the usage of
the AverageRating control for anonymous users in the xslt.