diff --git a/login_server/src/cpp/JSONInterface/JsonCreateTransaction.cpp b/login_server/src/cpp/JSONInterface/JsonCreateTransaction.cpp
index 99aa1f8b8..3fb31f4f3 100644
--- a/login_server/src/cpp/JSONInterface/JsonCreateTransaction.cpp
+++ b/login_server/src/cpp/JSONInterface/JsonCreateTransaction.cpp
@@ -35,7 +35,8 @@ Poco::JSON::Object* JsonCreateTransaction::handle(Poco::Dynamic::Var params)
 	else {
 		return stateError("parameter format unknown");
 	}
-
+	// allow session_id from community server (allowed caller)
+	// else use cookie (if call cames from vue)
 	if (!session_id) {
 		return stateError("session_id invalid");
 	}