code style
authorization by api key test and documentation for http clients that do not support cookie based sessions