security: when login is required don't return the site node in the preload store