api: do not expect the URL to be in the path in remove_url
plugin: fix remove-url
plugin: fix http headers

We always send JSON, so it's not x-www-form-urlencoded.