Bug 11647: (follow-up) add comment expressing that user must be logged in