Added user authorization to comments controller and locations controller