auth check for comments