api: fix #{cookie,token}_get when argument is not empty
api: validate user method. use #slash instead of _
READM:E change method name (foo_bar -> foo/bar)