update api paths to api.* instead of /pub/oauth2....