Use relative URLs for back-end services

In dev I will need to run this behind a reverse proxy, just like in
production.
Fix file permissions