add session check for voting