refs #4747 make sure to restrict sites to login when generating graph url