Put access points behind /api