fix: add asserts for multisite (fails on cas login if not multisite).