comments controller scaffolded, comment form goes thru to database but without params
comments form with hidden fields is working, could be a security vulnerability
questions comments form working with hidden form fields