authorization
vote with ajax