add optional ability to pass app_key for registered apps

Be glad to add some specs, but having trouble getting them working (see #1 ).