Make comment model implement authorizable
Remove unused create method
Remove unused add tag method
Clean up note model
Make images in note use one-to-many relationship
Moved user authorization to the controller