api serves static files for both guest and host