Fix ssl_allowed NameError in Api BaseController

030ea7114dcc0fa572167d1ffa9085bd5a50f449 introduced a `NameError`. Without including the `Auth` module (or `SslRequirement`) `ssl_allowed` was not defined.