Polls: Check if remote user can validly cast a given vote
Double voting etc.
essentially, the checking logic in CommonApi.vote has to be moved somewhere else (ActivityPub.create? should probably become ActivityPub.create_answer or something specific) / reused / refactored so that it runs in both local and incoming context.
@rinpatch comments appreciated