[law-api] Add restrict middleware to vote endpoint. Closes #490.

I think this is enough, but because is critical, please take a look and let me know any comment.