Closes #20: Make submitted apikey available in backend

- use security context