Vote.php doesn't enforce session checking.

[hjarrell]

Currently only the index page checks to see if the user has voted before, so technically someone could just keep pinging vote.php to vote.