add test for unauthenticated user not being able to vote