* rating a place now uses the userId from the API session, and doesn't
require it passed in from the front-end