Add private bit in api/NNN url for completeness.
Add private bit in api/NNN url for completeness.

While at it, verified that private bit is enforced through api/.* urls.

TEST=manually tested on live server

http://codereview.appspot.com/3121041/

ligthyear/quick-check,ligthyear/quick-check