Fixes authorisation in votes controller