require_course_login() is designed for resources that should be accessible on the frontpage without login BUT those are not pages that allow you to modify something. Luckily it is not a huge security problem in 2.0 anymore because we are forcing readonly access for guest account and not logged in users.

Anyway please keep the require_course_login() on pages like view.php history.php (reading) and switch to normal require_login() in edit.php, comments.php, etc. (writing).