Dismiss vulnerability has no permission checks on the FE

We should check that the user is at least logged in before showing the dismiss button:

@plafoucriere @gonzoyumo does it make sense?