Encourage hosting internal apis on same origin

[peterboyer]

Although hosting your api on api.yourcompany.com may look cool, it forces your api requests to issue an OPTIONS request FIRST to check if CORS is allowed from yourcompany.com to api.yourcompany.com -- you can reduce the number of requests and overhead by half if you opt to expose your api on the same origin using a route like /api instead.