Fixed up desk ratings #3247

1. Ratings use user ID instead of updated date.  This is less error prone but still secret.
2. Used menu with page args instead of $_GET vars. (menu rebuild requried)
3. Nicer output.