only current_user can add comments