Added book ratings

![ratings](https://cloud.githubusercontent.com/assets/7677641/5070258/e6d792da-6e75-11e4-94cb-7f3713d1484b.jpg)

please be sure that ```$this->request->get('id')``` has no injection before use it