Removed votes controller authorization to make it more clear.
Added votes controller authorization filter.