Moved CreateMeeting endpoint

Some users are actually hitting the API via jsonp in a browser.  We serve xss headers on the /api directory so this will in fact work.  But CreateMeeting historically lived elsewhere so we've gone ahead and moved it so that this will work.