Add html sanitizing to comments controller