checks whether the user is loggued in before creating the iframe - refs BT#16297

plugin/userremoteservice/iframe.php

@@ -3,6 +3,10 @@
 
 require_once __DIR__.'/config.php';
 
+if (!api_user_is_login()) {
+    api_not_allowed(true);
+}
+
 $plugin = UserRemoteServicePlugin::create();
 
 Display::display_header();