Perhaps escape `/api/me`