Add authorization to comments controller