added before_filter for authentication to comment controller