Allow users to hit server, supplying org-name and api-key

Separate http & repo caches for each org, to avoid cross-talk.

$ curl -d '' http://localhost:9000/audit/guardian?apiKey=fddsetrfsfdfsd