make buttons to add/delete/edit not show if user is not logged in
assign user_id's to comments/replies; don't show edit/delete buttons when comments aren't yours