Basic external API is now working, looks against profile.  URL hackery has the url as short as /api/{{ username }}'