allow comments only as ajax requests