EU gets tough on credit rating agencies