remove 'api' subdomain restriction