Do not expose _edit_url in the API

This is a private item for the WebUI.