join auth_user
login required, and do not let user override user name/email attributes in comment post