rebuild vote controller
Merge pull request #1173 from loomio/fix-vote-security

fix permissions with voting