Add comments on incidents

Comments aren't owned by anyone yet, since users are authenticated but not persisted to the database. Comment ownership will be added later, after more work on authentication.