add authentication to coment form
add users first_name and last_name to strong parameters