added permissions checking on adding comments
chenged the notification email text to contain the task title and link