Banned users can still use the API

Banned users can still use the API: a task in MiMo-V2.6-RL-harbor-code: MiMo-V2.6-RL Code (Harbor) (Harbor dataset). We use the :banned role to lock abusive users out of the site, but it looks like the API doesn't honour it.