diff --git a/framework/core/src/Api/Middleware/LoginWithHeader.php b/framework/core/src/Api/Middleware/LoginWithHeader.php
index d3384b1ab..8f2a3f4d9 100644
--- a/framework/core/src/Api/Middleware/LoginWithHeader.php
+++ b/framework/core/src/Api/Middleware/LoginWithHeader.php
@@ -10,6 +10,8 @@ class LoginWithHeader
 
     protected $prefix = 'Token ';
 
+    // @todo rather than using a singleton, we should have our own HTTP
+    //     Request class and store the actor on that? somehow?
     public function __construct(Actor $actor)
     {
         $this->actor = $actor;