Users cannot bypass logging in to comment

If the user navigates to a record and appends '/add' to the URL
they are still redirected to the login page.