Comment 4 for bug 849027

This is a major release blocker. We already opened up the guest session to not require a previous login, so now being able to access other home directories is a nasty security regression. I'll have a stab at this.