allow user authentication AND the use of API keys for the same resource
add php session support