self-hosted supabase: /auth/v1 + /rest/v1