[api] fix the routes to say what HTTP methods they support

I took out the valid_http_method calls for those. The test suite passes,
but it's possible that there are routes that allowed a :put without specifying
so. Now a :put on such a route will give you 404, where it emulated a get before