add comment and authentication in controllers
add sort order to comments