DRY the API key. Update routes to match ehr-example

cleaning up the code a bit by putting the API_ID in only one spot.  Also added tests, and a route called 'dashboard'