check for ctime, not mtime for file modification time

We need to check for the ctime and not the mtime, otherwise xattr rating changes will not get picked up.