Add Comment controller, Association, basic auth