non-admin availability update still fails despite using secure requests w api token :poop: