Custom endpoints use passport to authorize requests. It was previously exported and removed recently.