site id must be available through app begin request or controller action filter