minor changes

diff --git a/CRM/Utils/REST.php b/CRM/Utils/REST.php
index 63233e7aa9deb9840b28432f725c9462de308198..5745f1610c21ac36554a35563b0aa76997e4c6fd 100644 (file)
--- a/CRM/Utils/REST.php
+++ b/CRM/Utils/REST.php
@@ -344,6 +344,7 @@ class CRM_Utils_REST {
     // If the user does not have a valid session (most likely to be used by people using
     // an ajax interface), we need to check to see if they are carring a valid user's
     // secret key.
+    // XXX this is the new way of doing it, which should be the only way of doing it.
     if (!$valid_user) {
       $api_key = CRM_Utils_Request::retrieve('api_key', 'String', $store, FALSE, NULL, 'REQUEST');
       if (!$api_key || strtolower($api_key) == 'null') {