only permit comments when logged in