force api authentication if --disable-api-security

siac has no support for api authentication, and I would like to write some additional tests around the logic. Would also like to convert the error messages in to explicit variables the way that we have for most of the modules.