Only allow a clientId || apiKey, never both.

When a Client ID is set, prefer it over an API key.
Merge pull request #10 from bamnet/master

Only allow a clientId or apiKey, never both.