Add spec to ensure unauthorized users can't create comments
Add current_user_admin? helper, fix bug