Fix types of WebApiController

POST expects to have an object passed in.
Allow DELETE of votes (without ID)

This allows us to clear out a vote set, thereby resetting the voting
session.