[api] make request history optional

Old clients may break on new history layout, so we show it only with a "withhistory"
parameter now.

Adds also the option to include the review history embedded already.