Since it's a "non-user-facing" url, probably best to put this in api_urls.py (and, below, in api_views.py)