Controlling Access To REST API User Functionality For Multisite