Change api to /api to remove the need for CORS support.