added local override to auth/jwt system
moved api routes behind /api
backed out errant eventsd.js change