accept key auth for all API v2 actions
some regression tests for api key auth
Improves specs
Adds changelog entry
Merge remote-tracking branch 'origin/dev' into fix/missing_key_auth_actions_2734

Conflicts:
	doc/CHANGELOG.md
Merge pull request #809 from opf/fix/missing_key_auth_actions_2734
Merge remote-tracking branch 'origin/dev' into fix/mark_required_fields

Conflicts:
	doc/CHANGELOG.md