add a warning message when the application is initially deployed
added authentication via api key for some limited api methods (fix #64)