Controllers: check if session is open when adding votes/questions

app/controllers/QuestionController.java

@@ -12,10 +12,14 @@ import play.mvc.Result;
 public class QuestionController extends Controller {
 
 	public static Result createAnswer(String sid) {
+        // TODO: open check
 		Session session = Session.find.byId(sid);
 		if (session == null) {
 			return notFound("session not found");
 		}
+		if (!session.open) {
+			return forbidden("session not open");
+		}
 
 		JsonNode json = request().body().asJson();
 		if (json == null) {

app/controllers/VoteController.java

@@ -15,6 +15,9 @@ public class VoteController extends Controller {
 		if (session == null) {
 			return notFound("session not found");
 		}
+		if (!session.open) {
+			return forbidden("session not open");
+		}
 
 		JsonNode json = request().body().asJson();
 		if (json == null) {