hide "/_api" from public API

fixes #119