Adds CSRF fix for Devise and Allows Users to update their Rate

Fixed CSRF missing token when rating.
Allows users to update their rating.