Restrict API methods

List only used actions. It is better to show 404 than raise an exception saying that action was not implemented on the controller. Noticed this while documenting the api.