move cors to seperate method, pass user to comment service
Merge pull request #526 from ahilles107/cors

move cors to seperate method, pass user to comment service