authenticate user before voting