Allow ClientsController to authenticate as API.

Ripped straight out of EntriesController. That is_navigational_format
thing is a hack to make browser requests behave better, but requires API
requests to pass a bogus format like .js even though they're requesting
HTML.