diff --git a/webgoat-container/src/main/java/org/owasp/webgoat/controller/StartLesson.java b/webgoat-container/src/main/java/org/owasp/webgoat/controller/StartLesson.java
index 6e8df903a..0200e3e10 100644
--- a/webgoat-container/src/main/java/org/owasp/webgoat/controller/StartLesson.java
+++ b/webgoat-container/src/main/java/org/owasp/webgoat/controller/StartLesson.java
@@ -61,7 +61,6 @@ public class StartLesson {
      * @param request a {@link HttpServletRequest} object.
      * @return a {@link ModelAndView} object.
      */
-    @PreAuthorize(hasAnyRole('foo'));
     @RequestMapping(path = "startlesson.mvc", method = {RequestMethod.GET, RequestMethod.POST})
     public ModelAndView start(HttpServletRequest request) {
         ModelAndView model = new ModelAndView();