Simple key/secret based authentication for APIs