remove csrf
fix bug
add login api
remove user login via json
implement authentication, allow post through api
update swagger for voting