Add nonce; ensure that js file only load on comment.php page