hack to show apiKey
slightly less hacky way to show API key
fix one of API authentication routines to treat oauthConfig.server as the URL it needs to be elsewhere (not just a host!)
Merge pull request #16 from tessel/nvw-misc

Fix API auth bug, and show apiKey at /profile