Update comment

Author: acalog

src/authorizeRequest/checkUserAccess.js

@@ -9,7 +9,7 @@ function checkUserAccess(rules, headers) {
   // Get the userName as the unscoped eppn ( e.g. the email without the @domain).
   const userName = eppn.split('@')[0];
 
-  // If we got an empty userName, fail to restrict the request.
+  // If the userName is empty, restrict access immediately.
   if (userName.trim() === '') {
     return false;
   }