added secret option to tags list command
added methods for session handling to api client, leverage project auth token for destroying multiple keys