added ROOT and PLUGIN operators to the API; also: prevent favicons and robots.txt from hitting the API routines