Add research concerning transmitting api keys to a web-api

Signed-off-by: Clemens John <clemens-john@gmx.de>