Sessions prevent duplicate voting; new API endpoint for vote ability