Update ApiAuthenticationProvider

Authentication now fully authenticated using ApiAuthentication instance
instead of UsernamePasswordAuthenticationToken parent class.