diff --git a/middleware/authentication.js b/middleware/authentication.js
index 9aa0466..87b2cc4 100644
--- a/middleware/authentication.js
+++ b/middleware/authentication.js
@@ -19,7 +19,7 @@ function adminAuthNeeded(req, res, next) {
 
 // middleware to use if pnid authentication is required
 function pnidAuthNeeded(req, res, next) {
-	if (req.isAuthenticated() && !req.user.role) {
+	if (req.isAuthenticated() && !req.user.role) { // having no role means its a normal account. only admin accounts have roles
 		return next();
 	} else {
 		apiHelper.sendApiAuthError(res);