Rename options.apiHost to options._apiHost to signal that it's private

It's should only be used for testing, in which case you can of cause
override it all you want