added comment policy

Comments could be added without signing in. I added an edit policy that hid the comments form unless a user was signed in.