apikey

@commuterjoy @matthew-andrews 
Wouldn't this be better written as actual middleware?