The general comment API endpoint had a bad call to

get_no_access_error, passing in the user instead of the request. This

would cause a 500 instead of returning the proper API error.

Ran unit tests.
Grepped through the codebase to verify that all other call sites were

  correct.