add authentication to votes, restricting views