api: added route for quota.

closes #441.