build schedule requests
make sure time requests are protected via authorization