Let the API use authentication modules

The API is only using the database for authentication. But some of us are using LDAP or other auth methods and don’t have anything in their database.

I made a diff to change this behaviour to use the auth plugins.

Downside to this is that we don’t have any control on who can access the api and who not.