added in hacks for the following:
 allow /api to be the root of all api calls, which then gets pulled out for the docs.
 create callback versions of filterApiListing() and others.  Needed for when pulling permissions from databases.