bind comment to post view, add authentication