protect vote resources

config/routes.rb

@@ -1,7 +1,7 @@
 Rails.application.routes.draw do
   resources :rooms, shallow: true do
     resources :users do
-      resources :votes
+      # resources :votes
     end
   end
   get 'rooms/:room_id/users/bulk', to: 'users#bulk', as: 'bulk_new_room_users'