add authorization to comments