Factor 'comment created by' out into controller so it is set to current user. Will aid caching of comment box in future and prevents comment impersonation.