endpoint should require the site