added comments controller and permistions