added app_id and api_token
issuerId is now app_id
auth with app_id + api_key
renamed apiKey into apiToken