added comment functionality, added id and status to auth user variable so the rights and user can be checked