fix api endpoints for storage upload/download

Ugh, I'm not sure.  Is it called as a positional arg?  In that case, you could just name it `_`.