CORE-4032: added a secured endpoint that the UI can use to add user comments to a tool request