Use api prefix for oauth routes