remove /api from routes and return more when creating resources

simplify URL routes by removing /api (note: it can be added back
in the wsgi configuration).

when successfully creating a new resource return 201 status code
and the Location header. also, for alerts and heartbeats return
the item itself. will mean one less query for clients.