REST siteaccess can be set via X-Siteaccess header