better api key support in JsonSimpleRestController