Protect comment creation against manually crafted POSTs