Added API Key auth middleware
Updated ApiKey Auth module to be path-specific
Configured cookie and API key auth to play nicely