Missing Ability specs on Comments.

@mezis here are your Ability specs on Comments, fixes #200. My previous #108 did not add any new ability constraints having merely reused the existing code that turned out to be untested.  

I feel that adding tests on a lower model level is generally preferable to integration or controller specs. Especially when possible :-)