Simplify api query

This simplifies the query params sent to the server by removing `username` and `update_key` from they query params.

I also somehow forgot to add the `TunnelBroker::Client` specs, I'm adding them here...