fix: set FALLBACK to * instead of /_api

If we would set NETWORK to /_api, it would conflict with /_api/_files/hoodie.js, so we set it to * instead.
NETWORK must be set in general, otherwise the ajax requests to the backend would not be working, even when online.