[bug] remove apiURL from bonafide

it seems this was an attempt to make this injectable for tests, but it can work by changing config variables too.

(current at libraries branch is broken because APIURL was removed from config).