Allow voting on reviews

First draft, posting a PR mainly since I have a few questions, and for some early feedback. 
![rate_reviews_1](https://cloud.githubusercontent.com/assets/2644780/3867707/5265ae9c-200b-11e4-83eb-ac71a6d84bc3.png)

Should the PUT request return anything in the body, or just a 200? I currently return a small JSON body, but don't do anything with it here.