[webui][api] added edit/delete functionality with permission checks
[webui][api] edit and delete both route through different methods now.
[webui][api] refactored permission check. Added condition for required params. Handingly unknown request ids for comment
[webui][api] moved field checks to controller, updated test functions and some more refactoring.
[webui][api] added required_fields to check for empty params/content and fixed other tid-bit bugs