add some help center endpoints

always inject credentials into the request