Only require authentication when the user wants to make a comment. You could also use Facebook/Twitter login systems built into the device so the user presses login, selects their account from an action sheet, and they're in. No username/password friction.