Use AnonymousReadOnlyAuthorization on RatingResource rather than SelectiveAuthentication; remove SelectiveAuthentication