This case can happen when somebody is tinkering with the page, since we don't render the form to post a comment if not authenticated, so nice catch here. I suggest though that we follow the 'permission denied' policy as we do here

 https://github.com/mozilla/remo/blob/master/remo/reports/views.py#L76