Ensure only signed-in users can vote

Not sure how this bug has survived this long - it was well masked as the
template will hide voting buttons for unauthenticated users.