doc: add admin api doc

We don't need to document the behavior of the timeout - that has nothing to do with the API spec, that's just HTTP server logic.