Don't log empty apiKeys
Added integration tests for ACL limits from the Whois REST API.