Closes #564 by updating paths in the controller and JSP.
Closes #563 by removing 'word-wrap: break-word;' from <td> with the API key in it.
Closes #562 by checking for existing WAFs first