added comment creation to post show page
added before_action for looking up post by ID{
added authentication
added protections in views for checking if user is logged in