allow voting only if logged in