Allow disabling of OAI API key auth. refs #7469

Added a setting to disable OAI API key authentication and added
logic to check this setting before authenticating.