Remove /api endpoint

API entities can be reach by supplying .json format to the request url.
Applicable for section/chapter/heading/commodity endpoints. GET requests
only.
Enforce API endpoint access restriction

Expose /updates endpoint so we could check update state
Merge pull request #103 from alphagov/61656250-refactor-api-access

61656250 refactor api access