Add some comments clarifying isAccessible contract wrt not authenticated

Perhaps update the three comments like this to say
```
// authentication disabled
```