Only Allow Evals to Create/End Polls

[RebeccaSyria]

This can probably be done at the same time as #19 , anywhere that has "evals=true" in the code should be an actual check
and also the initialize api and other evals only apis should be restricted

[RebeccaSyria]

Example from @mxmeinhold of restricting a route: https://github.com/mxmeinhold/impeach/blob/master/src/routes.js#L33-L35