update comments, auth rules for comments