Cleanup TODO comments

Unneeded TODO comments, and a couple TODO comment tweaks
(The authorization check when creating the actions facade covers all our authorization needs)