Added final authorization to votes controller