shop-web: the API is at "/api"