can only vote using a correct hash in the url