Enabled the API to use the currently logged-in users permissions against...

... api endpoints
$base_url . "/api" ?