Postcard API - Use /api/auth/* endpoints