Have the user add their own api token and save it for future use.

[jeffslofish]

This prevents us from having to reveal our api token on the client side, and it will prevent some overly ambitious users from hogging up all the api key fetches we are allowed.

[jeffslofish]

Not necessarily now that the api token is stored on the server.