use API on login

Avoid accessing files from the api/ submodule,
instead validate user login indirectly via API.

This makes libba.net entirely independent from
the api/ submodule.
Delete submodule api

libba.net does no longer rely on any files inside it,
so it is no longer needed. The API is still used, but
it does not require the code to sit in that directory.