Scantegrity: End-to-End Voter Verifiable Optical-Scan Voting