Update default endpoint to new.m.ox.ac.uk/api

Should allow users without support for CORS