Continuing migration to /api

A few more places use /user/... instead of /api/user.  This
commit updates more of those instances as I found in the code
from testing.