Add authentication to comments controller
added json view for API