Fix query string authentication for API calls

[rdwebdesign]

What does this PR aim to accomplish?:

Closes #2326

How does this PR accomplish the above?:

Passing the api flag to the password verification function.

What documentation changes (if any) are needed to support this PR?:

none

---

By submitting this pull request, I confirm the following:

1. I have read and understood the contributors guide, as well as this entire template. I understand which branch to base my commits and Pull Requests against.
2. I have commented my proposed changes within the code and I have tested my changes.
3. I am willing to help maintain this change if there are issues with it later.
4. It is compatible with the EUPL 1.2 license
5. I have squashed any insignificant commits. (git rebase)

---

• I have read the above and my PR is ready for review. Check this box to confirm

[pralor-bot]

This pull request has been mentioned on Pi-hole Userspace. There might be relevant details there:

https://discourse.pi-hole.net/t/pihole-api-and-tasmota/57544/2

[PromoFaux]

Looks Gouda to me

[jojost1]

@PromoFaux Any word on when this fix can be released? I would really appreciate if this could be hotfixed (the bug breaks all authenticated API calls and therefore many third party Pi-hole utilities) but I don't know how you decide if it's worth to hotfix something 😄

[PromoFaux]

No reason why it can't go out today, just waiting for another couple of pairs of eyes on it from the team before I hit the buttons!

#2332

[jojost1]

I appreciate it! ❤️

[baderdj]

Looks like server stats aren't allowed with this patch. Things like Temperature, CPU, Memory show an error while fetching data.

[PromoFaux]

Things like Temperature, CPU, Memory show an error while fetching data.

This is expected: #2332 (comment)

[baderdj]

Things like Temperature, CPU, Memory show an error while fetching data.

This is expected: #2332 (comment)

oh ok. Not a huge miss but it was nice to see on the Pi-hole Remote app.