fixed comment readById which was using wrong class
Fixed password check and permanently disabled submit button
Renamed getUser()
Restrict comment to entitled users

Move current user to dao and store userId on comment