require post and auth on all (up|down)vote view