accept key auth for all API v2 actions
some regression tests for api key auth