added HTTP authentication for comments and post controllers