Fix rating circumvention issue

Users could circumvent the "ratings visible" setting just by searching for the rating.  I assumed you intended them as priveleges and not defaults due to the way in which it redirects out of pages which display the things.

I also cleaned up the two regexes and the weird iteration to build a comma-delimited list of quoted strings to unify into one single regex and handling for it (I think it's clearer, if you disagree I'll revert that change)