Remove api access attempts and move css/js files into rsc.  Add advanced key that uses the agency name and a random hash.