CANDY POP server — API only. health: /api/health