should not be allowed to vote if not logged in
vote in controller