Don't croak on GET without apikeys (action #2816)

Also moved assets to api_public
Let warning in clone_job.pl emit a real error message instead of HASH(...)