1 files changed, 3 insertions, 3 deletions
diff --git a/routes/user.js b/routes/user.js
index f5dab0c..03dc286 100644
--- a/routes/user.js
+++ b/routes/user.js
@@ -207,7 +207,7 @@ router.post('/signin', loggedOut, function(req, res, next) {
 
 });
 
-router.post('/user_profile/send_message', loggedIn, function(req, res, next) {
+router.post('/user_profile/send_message', loggedIn , function(req, res, next) {
     var date = new Date();
     var current_date = date.toString().slice(0, 24);
     var mail_data = {
@@ -232,6 +232,7 @@ router.post('/user_profile/send_message', loggedIn, function(req, res, next) {
     res.redirect('/user/user_profile');
 });
 
+// Authentication check in code
 router.post('/comment/submit/:examID/:qID/:solID', function(req, res, next){
     var examID = req.params.examID;
     var qID = req.params.qID;
@@ -239,7 +240,6 @@ router.post('/comment/submit/:examID/:qID/:solID', function(req, res, next){
     var username = req.user.user_name;
     var solutionID = req.params.solID;
     // Must be a logged in user to access
-    console.log(examID + "," + qID + "," + comment + "," + username + "," + solutionID);
     var fields = [comment, username];
     if(req.isAuthenticated()){
         dbFile.add_comment(solutionID, fields, function(commentAdded, statusMessage){
@@ -257,7 +257,7 @@ router.post('/comment/submit/:examID/:qID/:solID', function(req, res, next){
     }
 });
 
-router.post('/solution/vote/:examID/:qID/:solID', function(req, res, next){
+router.post('/solution/vote/:examID/:qID/:solID', loggedIn, function(req, res, next){
     var vote = req.body.vote;
     var examID = req.params.examID;
     var qID = req.params.qID;