fix routing for siteextensions api

We mistakenly support `/api/api/extensions`.   This fix is to get rid off such support (intentional breaking change).