strong parameters extended to comments, users