Misc cleanups and consistency fixes.
 - make the API controller take an entity type instead of a string
 - remove unnecessary i18n lookups on confirmations
 - add indexibility to vocabs and auth sets