using password hash api

now using password_hash function with bcrypt parameter instead of sha256
comment box in posts

added a comment box in post page