--- a/web/views/authentication.py	Tue May 05 12:04:47 2009 +0200
+++ b/web/views/authentication.py	Tue May 05 12:07:42 2009 +0200
@@ -53,6 +53,7 @@
         return cnx
 
     def login_from_email(self, login):
+        # XXX should not be called from web interface
         session = self.repo.internal_session()
         try:
             rset = session.execute('Any L WHERE U login L, U primary_email M, '