finish comment js, forms, and permissions