hook up `npm test`
Add wildcard matching for api. subdomain.

This makes *any* url that ends in api.domain.tld into an
API request.

So a.api.domain.tld, b.api.domain.tld etc, all work.

But also flodderapi.domain.tld. I don't think this is an
issue now, but we can make it more strict later.

Closes hoodiehq/pocket/#3.