diff --git a/dandiapi/settings.py b/dandiapi/settings.py
index 5550e116e..27bbca651 100644
--- a/dandiapi/settings.py
+++ b/dandiapi/settings.py
@@ -54,8 +54,6 @@ def mutate_configuration(configuration: type[ComposedConfiguration]):
         # Authentication
         configuration.AUTHENTICATION_BACKENDS += ['guardian.backends.ObjectPermissionBackend']
         configuration.REST_FRAMEWORK['DEFAULT_AUTHENTICATION_CLASSES'] += [
-            # TODO: remove TokenAuthentication, it is only here to support
-            # the setTokenHack login workaround
             'rest_framework.authentication.TokenAuthentication',
         ]