show comments in the correct ordering
add controller authorization