fix user setting path and add authentication in books/comments