I am creating a secure web based API that uses HTTPS; however, if I allow the users to configure it (include sending password) using a query string will this also be secure
You can send password as MD5 hash param with some salt added. Compare it on the server side for auth.