add auth check when delete comment