Make API key optional

Allow resources to be supplied with optional authorization instead of
mandatory