Updated Web.Config to add json protection and updated CommentHandler to offer a custom 403 around the storage.save