feat: security & tests on ratings