- use built-in @login_required decorator
 - new_comment instead of newComment