Auth

[rzxc]

Summary:

• api_key is expected to be passed as a parameter in a query string (http://localhost:9292/calendars?api_key=123456).
• If the customer doesn't have the permissions to create/read/update/delete the resource, then 404 Not Found error will be raised.
• If someone is trying to access any API's URL without api_key or with api_key which doesn't exist, then 401 Unauthorized.