change /api/current to just /api

And replace the silly /app/token with /api/token like the old days.