rhbz1094090 - use authenticated user's apiKey for rate limiting