Refactor API key authentication to use Catalyst's ActionRole(s) via Does() so that one can attach other roles to various actions as well