fixup! ERP5Security: make ERP5AccessTokenExtractionPlugin work with user ids

remove some non informative comments (this logic is what the default
token script does)

product/ERP5Security/ERP5AccessTokenExtractionPlugin.py

@@ -81,9 +81,6 @@ class ERP5AccessTokenExtractionPlugin(BasePlugin):
       erp5_access_token_id = credentials['erp5_access_token_id']
       token_document = self.getPortalObject().access_token_module.\
                      _getOb(erp5_access_token_id, None)
-      # Access Token should be validated
-      # Check restricted access of URL
-      # Extract login information
       if token_document is not None:
         user_id = None
         method = token_document._getTypeBasedMethod('getUserId')