I have a website at Flickwit. The website has the option to login by email registration or Facebook Connect. The issue that I have is that if users are already logged into Facebook in a previous browser session, then they will be able to post comments on the website even though they are not logged in to the application.
This is a problem since I cannot record the comment against a registered user - it would be unethical since they have not officially registered. What are my options here insofar as maintaining user trust. Should I disconnect the FB comments so that they are forced to log in to post comments or would it be acceptable to (when the user comments) to auto-connect them - in this case they would go through the usual FB registration process and this would purely be a suggestion from the application. Any other ideas will be appreciated.