turned off request forgery. dynamically appended posts now allo commenting