Backport "API: Replace HTTP Basic auth with static key in custom header" for Recursor 3.6.2

Includes all the YaHTTP changes from master, plus the API key change.

Building the auth. server from this code probably doesn't work.