How to hack an election—and what states should do to prevent fake votes