minor tweaks to api key handling, default value of NULL now provided, retrieve endpoint callback fixed so api key is no longer treated as op. This prevents internal errors when API key is omitted and prevents retrieve endpoint easter egg that returns full form markup from being triggered when an API key is supplied.