small fixes

[karenetheridge]

• fix some disrepancies in the api documentation
• use url_for() consistency when setting Location header
• assert in tests that json booleans are really json booleans, not integers
• add more annotations in request schemas to assist clients when generating forms and results
• improve exception handling
• fix POST /device_report?no_save_db=1 with existing devices