permitted user id in comment, made new comment default to curent user id