Please change the url to "/cron/garbagecollection". Otherwise the URL can be called by any user.