added authorization to create comments