It should hopefully (fingers crossed) be rendered only for logged-in users. Did you get a chance to use an authenticated user, by chance?