infra: make api_key mandatory for api-gateway routes
infra: make api_key mandatory for api-gateway routes

Add `api_key_required` flag to api-gateway endpoints, so they can only
be accessed when provided an api_key.

vcapretz/superbowleto,vcapretz/superbowleto