Require the right http scope.  Still broken.