fixed comment bug and added user auth before_filter