ApiClient module

Throw everything relating to `#api` in a module that classes just include to get it.

* Every class seems to want to access the api to verify behavior, stop copying it around
* Stop passing the token around between constructors since it's pulled from the env