Scoping the vote creation to the current user

We do not need the user_id to be passed to the controller as it already knows who the current_user is. So, we should always scope the object creations in the controllers to the current user.