[DO NOT MERGE] Remove api key from dom in backend and frontend since the api now authen...

...ticates via the session as well