fixed comments controller and verify ownership to only edit/destroy a user's own comments