All requests for JSON now fo through /api/.