working on form and session_id stuff
validation, current_user usage for username, error messages, all for comments