Enforce client_id on all endpoints