fixes #6674 - correctly access wrapped params, fix apipie doc

This breaks v2 in the sense that it'll make this a 422:

```ruby
{ "host" : { "name" : "whatever" } }
```

and it'll make the following work, which is not included in the API.

```ruby
{ "base" : { "name" : "whatever" } }
```