The story should have a field called created_by
which is a struct that contains the user id and user name. Is this always you?
If you're using the API to add a comment, then the creating user will always be you. There API provides no way to impersonate another user. Unless you can get their API credentials, this is a no go.
As for stripping the text - sadly, no. There is no way to prevent this.