note: my cms uses /api/login to login - easy to see in the / page
Except, of course, on https:// pages since that's a different webserver =)