require auth and configure cron endpoint