add authentication when updating / deleting comments