authenticate users for comments