Cleaning up authentication code. authKey is now expected in the header
and not the URL.