Allow OAI API auth if not required. refs #7469

If OAI API auth isn't required, allow requests to be made using
OAI API auth keys to get additional data (reflecting permissions
of user with matching auth key).