hack to show apiKey
slightly less hacky way to show API key
fix one of API authentication routines to treat oauthConfig.server as the URL it needs to be elsewhere (not just a host!)