got comments to work

We should make sure that people cannot edit somebody else's comment by scoping this query to the current user.

```ruby
@comment = @review.comments.find_by(user: current_user, id: params[:id])
```