Rewrote authorization logic for votes controller