working comments and user login restricter to edit/create/destroy actions