Match Jargon's OAuth URLs

All of Jargon's OAuth URLs are scoped to /api. This should reflect in the client.