Forward token only works if logged in to Drupal

Additionally, there are no Access Controls for Forwarding in admin/user/access for Drupal, which makes me feel that there is no control administratively over whether or not forwarding can happen.

See here: http://forum.civicrm.org/index.php/topic,2105.0.html