[api] allow subpath in hook URI and pass in req