Move votable object methods out of ApplicationController
- Remove user_id from post and comment attr_accessible FOR SECURITY