in current version $poll_id should not be limited to user only, this will limit the ability to show poll results from other application (such as an iframe of a website). there should be a way to publish/hide a poll from non-user visitors.