Can-spam requires that this works without login.  Doesn't this require the user to login?