add comment destroying and destroy http authentication