Assessment backend: use /api/ for endpoints