Fixes security and ajax bug in comments.