internal/router: bulk metadata API implemention

We also fix all paths so that they start with / after splitting. This makes them compatible with the usual way that paths are specified in URLs.
moved comment to HandleJSON itself and clarified.