updated token verification middleware reworked blog post POST controller username acquisition
comments can no longer be updated or deleted - out of scope users can now be created, updated and deleted