Can we please deprecate the behaviour that addressing any undefined url gives us
the API? It was always unintentional, and now I believe it's actively harmful.
It should be pretty simple to do - just write a handler that 404's any path
that's not /, and register it to /.