[api] Fail authentication if we are not able to bind with user credentials

We need to fail the authentication here because otherwise we create the
user in OBS without the proper permissions.

Signed-off-by: Jan Blunck <jblunck@infradead.org>