Changed http requests to /api/, and changed the login system to cookies.