don't use xid in body of post comments/votes handlers, let middleware handle
don't use xid in body of post comments/votes handlers, let middleware handle

pol-is/polisServer,pol-is/polisServer,pol-is/polisServer