support api_admin_key for calls from webapp to /collections