Switch back to /api to address CORS issues for now