rest_api: adds custom exceptions, some edge cases and tests

[rudolfix]

Tell us what you do here

1. makes sure that "path" is fully bound to params
2. nicer exceptions for resolve params leading to a unknown resource name
3. friendly exception when keys not found in parent record