jsonp filter only on /api/*