validates users before allowing rating/review #41

ratings controller
reviews controller
don't save ratings from restricted users #41
restricted users can't add reviews #41
tests pass #41