added authorization filer for user & votes controller
Definedhelper method current_user
bugfixes