Process request only with OAI API key. refs #7469

Added a setting to disable OAI API key authentication

Added logic to require OAI requests provide key if an OAI
key exists and OAI key authentication is enabled.