Fix: plug important CSRF vulnerability in cast_vote (temporary hack).