What we need to do:

1. Review existing scripts and make sure that every call to require_capability is preceeded by an appropriate call to require_login. (Almost all of them are already.)

2. Take the old code out of require_capability.

3. Add a note to the release notes.