renamed user to shared_key and api_key to secret_key to be more consistent with kajomi naming
added return_response setting for better debugging
fixed sender param (now json encoded)
now fetching secret via http get
some cleanup