Handle voting more safely; use socket.id, not client's mySid. Ref #9