FakeTokBox should expose an apiKey property.

Otherwise, the returned JSON objects from the server doesn't contain the apiKey
information, since its value is set to "undefined".