Corrects the authorization in the update of discussions and comments

Previously it was not verifying against the instance, but only the
class.

Also added a bin/server file for uniformization purposes
Why isn't it needed for the other actions?