ensure analytics api calls need to be authenticated with user or token