diff --git a/src/routes/accesscontrol.js b/src/routes/accesscontrol.js
index 8734693f7..dc35d2b3d 100644
--- a/src/routes/accesscontrol.js
+++ b/src/routes/accesscontrol.js
@@ -39,7 +39,7 @@ function initialize(callback) {
     });
 
 
-    // used when username/password is sent in request body. used in CLI tool login route
+    // used when username/password is sent in request body. used in CLI login & oauth2 login route
     passport.use(new LocalStrategy(function (username, password, callback) {
 
         // TODO we should only do this for dashboard logins