Mention that the upvote method must go above the private keyword

Several students were adding the `upvote` action method to the end of the controller
under the private methods.