always require login for commenting
refactor comment notifications
add post owner to show
move edit-profile link from header to profile page