Routed all /api/* calls to DBKAPI.java, and filter from there. When unable to find the method, send HTTP 400 with an explanation what is expected