- remove username requirement
- api key administration
- moving routes to separate config