Previously, the Songkick api key was necessary in the javascript because of the JSONP calls. Now, we call back to DDG to make the api call on the client's behalf, so we don't have to share the api key. As a bonus, the user's identity is not exposed.