Add authorization to comment controller.