issue #49: added secondary API host for non-auth endpoints to config