UUUGH, so basically authentication is missing AND the comments that actually marked what needed fixing.

Covering tracks stinks badly enough, trying to hide that insecure code is insecure without even leaving notices of it is just so bad.