add comment parameter to the security alert controller update action

I had forgotten this in a previous commit and comments where not being
updated.