This doesn't appear to work, whether I'm logged in or not. I'm pretty shocked that it ever did. Almost every automated scanning tool catches this, and Paypal has an in-house security team.