added auth to comment add