allow session-based access to all API resources from hosted fireplace
delete method for ratings (bug 848501)