Just by commenting out the API in urls.py, we make it inaccessible, but
easy to turn back on if we need to.