CSRF check votes