Allow unvoting

Hmm, this means that anyone could destroy this vote. I think we are gonna want this to be `current_user.id ==  vote.user_id`. Use a policy test to double check.