Added and used hasApiKey policy for accessing of exposed functionality, added security config, removed controller actions auto generation, specified routes