more safely check these
let the /id/* requests fall through to a direct hit of the service api