removed api key, and moved to external file. should be in root when actually hosted for security reasons. It's kinda like a DB password, Valve highly recommends.
adding openID in for use