Currently everyone can use the support function. It would be good to have a check if the user is logged in before using support. If the user is not logged in he should be taken to a registration or login page.