Adding /api in front of the path seems to be the right direction. But now I get this error
[2021-12-04 15:57:45.466] error: Grant: mount session middleware first
BadRequestError: Grant: mount session middleware first
at Object.throw (/Users/andrew/Projects/rise/tmp/test-four/node_modules/koa/lib/context.js:97:11)
at app (/Users/andrew/Projects/rise/tmp/test-four/node_modules/grant/lib/handler/koa-2.js:25:16)